| Contents |
| What Is Changing? |
| Why Is This Changing? |
| Replacing Existing Notices |
| Plain Text Email Clients |
Starting 5/3/2019, Office 365 Exchange users will begin to see disclaimers inserted into certain received or, in extremely rare cases, sent messages. These disclaimers are meant to make the recipient aware of message attributes that could indicate that the sender is misrepresenting who they are, or that the email contains possibly unwanted or malicious content.
The most frequent message disclaimer will warn when a message is sent from a source external to The University of Texas.
The purpose of this disclaimer is to make the recipient aware that the message originated from outside of our organization. Increasingly, the university is targeted by phishing attacks that leverages some form of email spoofing. Email spoofing involves an external email address impersonating a staff or faculty member in order to mislead, manipulate, and scam an unsuspecting victim. A more obvious version of a spoofed, or impersonated, message can be seen below.
The context of this message, combined with the new external message disclaimer, should indicate to the recipient that the sender is not really who they say they are. In this case, the message can be deleted and the sender can be blocked in your local outlook client. Don't hesitate to report particularly egregious or offensive phishing or spoofing emails to our Information Security Office by forwarding the message as an attachment to security@utexas.edu.
More information about phishing and spoofing can be found at the Information Security Office Phishing Outreach page.
Replacing existing notices with body disclaimers:
Existing [UTEXAS: SUSPECTED SPAM] and [UTEXAS: POSSIBLY MALICIOUS CONTENT] subject line warnings will be replaced with the new body disclaimers:
More information on why those disclaimers may appear on an email can be found in KB0011402 and KB0011404.
All email disclaimers are intended to encourage you to exercise caution and are not authoritative on whether the sending email is safe or malicious.
If your email client only displays plain text, an alternate text-only version of the above disclaimers will be displayed: